Around the same time the Stryker attack came to light, posts to a Telegram account and website controlled by Handala Hack ...
SocksEscort sold proxy services on the open web, but was actually routing traffic through compromised routers and internet-connected devices.